Kerberos

Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos

garys308@mindspring.net gwk i y z oupmjzw

Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos

Re: Query on EncryptionType and keytype

> "KK" == KK <[EMAIL PROTECTED]> writes: KK> Hi All, Can anyone tell me if there is any distinction between KK> etype [ EncryptionType ] and keytype as defined in section 6.1 KK> and 6.2 of the Kerberos RFC 1510 ? The writers of RFC 1510 invisioned that key types and encryption t

Re: AFS and Kerberos 5

> "Russ" == Russ Allbery <[EMAIL PROTECTED]> writes: Russ> Sam Hartman <[EMAIL PROTECTED]> writes: >>> "MattW" == MattW <[EMAIL PROTECTED]> writes: MattW> Can I leave my Kerberos 5 KDC in pure Kerb 5 mode or do I MattW> have to run some kind of Kerb 5-to-4 daemon to issue

None

This is an HTML message. Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos

RE: MIT Kerberos: is it Thread-Safe?

On Tue, 22 Jul 2003 [EMAIL PROTECTED] wrote: > Are you sure Heimdal is thread-safe? Like a month ago I checked with > them and theirs is not thread-safe either. - Rumor has it that while heimdal is not guaranteed to be thread-safe, in practice it works well enough. (i.e. there are a lot of people

Query on EncryptionType and keytype

Hi All, Can anyone tell me if there is any distinction between etype [ EncryptionType ] and keytype as defined in section 6.1 and 6.2 of the Kerberos RFC 1510 ? I specifically want to know whether it will be right according to the RFC, to service ticket requests from clients for encryption type

Re: AFS and Kerberos 5

Sam Hartman <[EMAIL PROTECTED]> writes: >> "MattW" == MattW <[EMAIL PROTECTED]> writes: > MattW> Can I leave my Kerberos 5 KDC in pure Kerb 5 mode or do I > MattW> have to run some kind of Kerb 5-to-4 daemon to issue kerb 4 > MattW> tickets to the AFS server - I'd like to be pure

Re: AFS and Kerberos 5

> "MattW" == MattW <[EMAIL PROTECTED]> writes: MattW> Esteemed Kerberos Peers, MattW> I am trying to set up AFS and authenticate with my Kerberos MattW> 5 KDC (AFS on RedHat, KDC on debian linux) MattW> My question today is: MattW> Can I leave my Kerberos 5 KDC in pure

Re: Windows 2K-based domain, UNIX-based Kerb/LDAP passthru

Scott, Sounds like we're both trying to do the same thing... Im at the University of Washington in Seattle in a small group - we have NT 4 now and are going to upgrade to windows 2000 w/active directory soon and want to use a Linux-MIT-Kerberos server as our master authentication. So all passwo

Re: AFS and Kerberos 5

On Tue, Jul 22, 2003 at 09:03:09AM -0700, MattW wibbled: > Esteemed Kerberos Peers, > > I am trying to set up AFS and authenticate with my Kerberos 5 KDC > (AFS on RedHat, KDC on debian linux) > > My question today is: > > Can I leave my Kerberos 5 KDC in pure Kerb 5 mode or > do I have to run s

RE: MIT Kerberos: is it Thread-Safe?

Are you sure Heimdal is thread-safe? Like a month ago I checked with them and theirs is not thread-safe either. Kent -Original Message- From: Nikola Milutinovic [mailto:[EMAIL PROTECTED] Sent: Monday, July 21, 2003 10:14 PM To: [EMAIL PROTECTED] Subject: MIT Kerberos: is it Thread-Safe?

Charting our futures

Kerberos mailing list [EMAIL PROTECTED] https://mailman.mit.edu/mailman/listinfo/kerberos

AFS and Kerberos 5

Esteemed Kerberos Peers, I am trying to set up AFS and authenticate with my Kerberos 5 KDC (AFS on RedHat, KDC on debian linux) My question today is: Can I leave my Kerberos 5 KDC in pure Kerb 5 mode or do I have to run some kind of Kerb 5-to-4 daemon to issue kerb 4 tickets to the AFS server -

Re: License for Kerberos 1.3

> "jacekn" == Jacek Nowicki <[EMAIL PROTECTED]> writes: jacekn> Our client National Bank of Poland in Europe, would like to jacekn> use Kerberos 5 ver 1.3. Which type of agreement / license jacekn> they needed to use this software in Central Europe? The README file in the release dictates th

Re: Windows 2000 Server as KDC

>We're not running OpenAFS. Still Transarc AFS. Heh, sucks to be you :-) >I hadn't heard that there's a pure krb5 solution for AFS, though ... >even with OpenAFS. Well, I wouldn't call it "pure". It's restricted to single-DES, and it's only "sorta" V5, but it's enough to fix the V4 cross-real

Re: Windows 2000 Server as KDC

On Tuesday, Jul 22, 2003, at 07:52 US/Pacific, Ken Hornstein wrote: an easier solution would be to setup a windows realm for Win2k KDC and a cross re alm trust with a linux box in a different realm. We were doing this (with Solaris, not Linux), but when the bug and fix for the cross-realm sec

RE: Windows 2000 Server as KDC

EXACTLY plus the krb4 versions had so many bad security flaws, we had no choice. when the bad krb4 bug came out last year, we removed any dependencies or backwards compatible 4 code and just use 5. mel -Original Message- From: Ken Hornstein [mailto:[EMAIL PROTECTED] Sent: Tuesday, July

Re: Windows 2000 Server as KDC

>> an easier solution would be to setup a windows realm for Win2k KDC and a cross re >alm trust with a linux box in a different realm. >> > >We were doing this (with Solaris, not Linux), but when the bug and fix >for the cross-realm security hole came out a few months ago, that caused >it all to b

License for Kerberos 1.3

Dears, Our client National Bank of Poland in Europe, would like to use Kerberos 5 ver 1.3. Which type of agreement / license they needed to use this software in Central Europe? Regards, Jacek Kerberos mailing lis